Chinese Hacker

[V1P3R]

Guys 30mins before someone got access to my steam account and purchased a 0.27rs worth of dota 2 cards for 365rs. i recieved a mail in chinese and most of my inventory was in market listings.
serioulsy how could this happen even i had my mobile and all my steam mails are in chinese now

[KalGimpa]

sorry this happened, partner.

the thing to remember is

nobody capable of hacking steam is going to waste it messing with your account

they will get in, scrape the site of all the truly useful, money making info and leave as quietly as they can and sell it

what happened to you was more than likely phishing.

somewhere along the lines people either

log into one of these sites that offer free stuff or trading

log into a page thinking it is a steam page, usually by clicking a link from a shady source

they gave their info to someone they thought was steam because of a scam

it is that or you had/have some kind of virus on your system. this is much less likely as phishing is the number one way that people are stealing accounts these days

use these steps, put together over the years by users smarter than i am, as needed

---------------------------------------------------

if you do not have access to your account

Account Recovery
Make sure you are completely logged out of Steam before you start the recovery process

How To Recover Your Account 

A Guide for Steam

By: Cassidy

This is a step-by-step guide on how to navigate the Steam Support Help page to recover an account that you no longer have access to.

https://help.steampowered.com/en/wizard/HelpWithAccountStolen

https://support.steampowered.com/kb_article.php?ref=2347-qdfn-4366

you don't need access to the email, phone number or password tied to the account for this to work. p
Just pick the "i forgot my password" and then "I no longer have access..." options when asked.

----------------------------------------------------------------

if you still have access to your account
(or after getting your account back, or just to be safe)

make sure to do all of these


DO NOT TRADE
many scams try and scare you into trading your items and they get hijacked

1. Scan for malware https://www.malwarebytes.com/

2. Deauthorize all other devices https://store.steampowered.com/twofactor/manage

3. Change passwords from a trusted/clean computer.

4. Generate new backup codes for your Mobile App https://store.steampowered.com/twofactor/manage

5. Revoke the API key https://steamcommunity.com/dev/apikey (there should be nothing in the APIKEY)

-----------------------------------------------------

as for any items lost or balance spent, those will not be returned as it is our responsibilty to keep our accounts secure

---------------------------------

and, finally, read

https://help.steampowered.com/en/faqs/view/70E6-991B-233B-A37B

[76561198334930909]

noticing that this only happens to people who use CSGO and do skin trading

[V1P3R]

Originally posted by Honor & Righteousness:

noticing that this only happens to people who use CSGO and do skin trading

Bro I can't even use mobile authentication properly and the steam mobile app is lagging and doesn't load anything

[KalGimpa]

Originally posted by V1P3R:

Originally posted by Honor & Righteousness:

noticing that this only happens to people who use CSGO and do skin trading

Bro I can't even use mobile authentication properly and the steam mobile app is lagging and doesn't load anything

if you still have access to your account, you need to follow those steps i posted.

after you have, read that last link

[76561198334930909]

there is one common factor in all the people that report about scams and having accounts hijacked, they all play CSGO and have numerous questionable items skins in csgo.

1 you show off your CSGO Skins making you a target, 2 you trade with fraudulent people in the csgo community that encourage the theft and trading of various items between each other.

in my observation the highest % of people who get accounts hijacked are the ones who trade. further more to ensure account safety do not engage in csgo trading , remove the display of csgo skins from your profile, and be happy you have them so keep them, other wise you make yourself a target. and potentially risk losing all of it.

[V1ctor]

Originally posted by V1P3R:

Guys 30mins before someone got access to my steam account and purchased a 0.27rs worth of dota 2 cards for 365rs. i recieved a mail in chinese and most of my inventory was in market listings.
serioulsy how could this happen even i had my mobile and all my steam mails are in chinese now

Same thing happened to me a Chinese hacker bought dota 2 skins with my steam wallet money and sold them on community market also sold all my csgo skin...

[N3tRunn3r]

money stealing and laundring

[tropicky trupik]

same happened to me yesterday. sold 30€ worth of CS stuff. bought overpriced 0,03€ dota 2 items for 1€. had aunthentificator and everything. steam support obviously couldnt help. changed password and run antivirus. no idea how it happened

[Zarineth]

Originally posted by Io*Is*Bio:

same happened to me yesterday. sold 30€ worth of CS stuff. bought overpriced 0,03€ dota 2 items for 1€. had aunthentificator and everything. steam support obviously couldnt help. changed password and run antivirus. no idea how it happened

You have 2 shady 3rd party sites in your profile name history. That's a pretty good clue about how it happened.

[Lithurge]

Originally posted by Io*Is*Bio:

same happened to me yesterday. sold 30€ worth of CS stuff. bought overpriced 0,03€ dota 2 items for 1€. had aunthentificator and everything. steam support obviously couldnt help. changed password and run antivirus. no idea how it happened

You missed a couple of steps, check the API key is empty and de-authorize devices if you want to make sure they no longer have access.

Also stop using those third party sites, that's where you're giving them all your login details (including your Steam guard code) that allows them to steal your stuff.

[nfnp]

I hate hackers !!!

[Connie]

This thread was quite old before the recent post, so we're locking it to prevent confusion.